Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          nS2z3/IM66AouHUdKOCDabcVkjaGcsrwTjgLhvZNIeI=
Subject key identifier:   82:70:DC:41:44:1E:6A:27:F0:52:16:FE:44:D3:89:B2:C9:FC:0E:25
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       01A0D9F19B2A73DDD8EC586A3B9B4540E8CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          1B12
Signing time:             Fri 25 Sep 2026 19:01:24 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:24 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:24 +0000
Files and hashes:         1: EGceg2KC2veG2ubJ67lLnyLOjtI.roa (hash: wY6zYtQUbn46Y33mgpfT8vGawedlaPHOCiudGF0vIQ4=)
                          2: FGz2Azbf0AxE4zPSOoCg4bCQxHI.roa (hash: zLIxet4MNh+fLw8tWoHJ+9JWHfqaXota8sy9Ge4lA3s=)
                          3: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: gdTRq5QcQjdgXvaGrIlmfupwXU710pDqKwr0YT/Am+o=)
                          4: Mqf6CjvjiOytmfKew5wMIrFMct0.roa (hash: WNuu5876X1n/9Z35upFbegg0OHBkwV/0aP5LxFUgXqw=)
                          5: Nct5nqhjZ5MmurkxWJBHHWbRMa4.roa (hash: 33QaAZca2Ux5dbZ3qMUfSafv9njl74xnkMuofl09biU=)
                          6: XFzx0VxKKF-e5w2Lr2cCrOGeanM.roa (hash: UP6bd6FhB5DBxfN1nWdp5xVVm3xQKWBg64Qhp36elmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f1:9b:2a:73:dd:d8:ec:58:6a:3b:9b:45:40:e8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Sep 25 19:01:24 2026 GMT
            Not After : Sep 26 19:01:24 2026 GMT
        Subject: CN=8270dc41441e6a27f05216fe44d389b2c9fc0e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bd:bd:4e:79:0c:01:d4:22:ff:9a:6c:3f:0e:
                    8c:62:59:3b:33:5f:44:40:73:c6:57:f2:00:c8:55:
                    6c:ac:b2:59:c7:5d:9a:3c:f8:c4:a1:c8:21:6d:24:
                    e9:53:6e:28:1b:95:1d:ba:f3:7b:ad:7d:35:75:68:
                    db:15:30:cb:01:b7:e8:be:cf:bc:1e:27:26:0b:f8:
                    31:d3:b8:6b:cf:82:d3:e0:5a:a1:cf:c5:3c:17:95:
                    70:16:25:b8:ef:dc:cc:f0:a4:20:db:cd:80:a6:5c:
                    36:56:d0:e3:61:11:ca:f0:f6:33:56:9e:1a:42:ab:
                    dd:df:ce:d7:33:28:44:8c:86:0f:ca:52:fc:73:59:
                    b5:de:29:00:8d:c3:b4:d9:46:88:39:6c:60:18:f9:
                    04:c9:eb:c9:09:03:b5:09:bb:22:5c:05:6e:ac:7f:
                    9f:a0:ed:82:93:67:b7:25:62:e0:e2:31:25:af:23:
                    d0:d4:b8:12:75:4b:2f:87:e4:48:54:06:1b:ba:ee:
                    76:fe:4f:db:80:87:1e:91:ea:46:33:e9:61:1c:0e:
                    a3:b0:b8:4f:db:5d:19:41:23:fc:ea:93:6a:da:74:
                    88:51:07:63:36:21:c9:54:6e:15:33:d5:96:77:99:
                    08:3a:9c:b6:e1:08:b7:92:81:ff:40:4b:0a:67:88:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:70:DC:41:44:1E:6A:27:F0:52:16:FE:44:D3:89:B2:C9:FC:0E:25
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:3a:a7:4b:ca:ea:73:c3:06:ea:cd:eb:a4:82:9f:84:09:
         85:90:91:61:be:69:ae:32:a6:38:34:df:7f:b2:ed:02:03:9b:
         95:cb:f5:57:5c:e1:21:77:b1:47:dc:c3:34:c4:44:67:f8:d7:
         d7:40:63:bb:ee:6d:43:f2:d0:ab:5f:8b:66:7a:a8:55:7f:90:
         59:3a:09:6c:6b:da:8e:c1:c4:92:cc:44:b2:ea:58:19:0e:49:
         e0:d4:46:a2:b9:9d:af:30:9d:9d:01:b5:cd:3d:da:08:7f:7c:
         74:f5:a4:eb:7f:0b:1c:6b:c2:cc:84:9c:da:e9:d2:51:58:4d:
         f5:58:bc:1b:cd:b8:75:3b:73:d0:7e:ab:ad:84:2a:95:61:45:
         b9:91:72:ad:4b:00:8d:16:20:6a:4b:23:c2:4f:b4:82:9e:3d:
         45:15:72:9d:e1:34:99:20:18:cc:c9:59:e0:5d:3d:7e:ab:a5:
         8d:85:54:21:42:01:9a:fe:e4:76:e0:47:04:67:3b:26:cc:eb:
         97:72:e4:40:6a:32:d5:30:b9:b2:a6:81:6a:be:f7:67:d3:c4:
         36:d7:e5:8b:78:26:44:15:83:4e:7b:d5:d7:23:df:f7:72:49:
         9c:18:66:f8:5b:54:c1:0b:c7:24:a0:b4:ec:4c:79:b2:ec:3a:
         53:73:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:10:57 2026 by rpki-client